Privacy Policy

• You connect only the accounts you choose: checking, savings and credit cards. Access is read-only.
• Account numbers are shown only as the last 4 digits. We never see your bank password.
• We do not sell your personal information, and we do not show ads.
• Some features use AI. What is sent is limited and is described below. Money moved to or from people is never sent.
• Nobody else sees your data unless you choose to share it.
• You can remove a bank or delete your account at any time from Settings.

Your account

You sign in with Google. We receive your email address, which we use to identify your account and to send notices about it, such as a warning before an unused bank connection is paused. Google also passes your name and profile picture to our sign-in provider, which keeps them with your account; the app does not show or use them.

If you turn on two-factor authentication, the setup for your authenticator app is stored by our sign-in provider. We never see your codes.

Bank and card data, through Plaid

When you connect a bank, Plaid gives us read-only data for the accounts you select. Only checking, savings and credit card accounts can be connected, including cash management and money market accounts at a bank (we treat them as checking and savings). Investment, retirement, loan, CD and HSA accounts cannot, and if Plaid sends one we do not keep it. For each account we keep its name, its type, the last 4 digits of the account number and the bank's name. We do not keep balances.

For each transaction we keep the date, the amount, the statement text, the merchant name and website when Plaid provides them, Plaid's category and whether it is still pending. Long numbers in statement text, such as a full account or card number, are cut to the last 4 digits before they are saved.

What you add

• Budgets and their amounts, and the categories you change or the store rules you set.
• Planned expenses and the purchases you add to them.
• Cash you were paid or spent, added by hand.
• Your gross pay, if you choose to enter it for a paycheck. It stays in your account and is never shared with professionals.
• Notes on transactions. These are private and are never sent to AI.
• Notes you write for Calibrate my spending.
• Your setup answers: your goals, ZIP code, birth year, and answers about housing, pay and regular bills.
• Your choices on subscriptions, habits and To do items.
• The advisors and CPAs you share with, and the monthly totals shared with them.

Professional accounts

If you have a professional account, we keep your type (RIA, IAR, financial planner or CPA), the name and firm clients see, the invite codes you make with any note you add, and your list of clients. Professional accounts need two-factor authentication turned on to make invite codes or see clients.

If you add branding, we keep your brand name, your two colors, your logo and the logo's average color (to warn you when it is hard to see). If you add contact methods, we keep your headshot, booking page address, work email, work phone and short note, and show them to the people whose pro you are. Logos and headshots are stored as image files that anyone with their address can open, so upload only what you would show publicly. We remove photo details such as location from the files. These are deleted when you remove them or delete your account.

As a professional, you do not see who has you as their pro. You see a person only when they share with you.

Firms

If you belong to an advisory firm on Calibrated Money, we keep the firm's name, who pays, its members and their roles, open invites (by email), the firm's branding and an activity log. The log records advisors joining and leaving, clients starting, stopping or moving their sharing (with the client's email), branding changes and downloads. Firm admins see their advisors' names, email addresses and the contact methods they show clients, the monthly totals of clients who shared with an advisor while that advisor was in the firm, and the log. They can download those totals and the log as files, which then leave Calibrated Money and are the firm's responsibility. Firm admins need two-factor authentication.

Talk to a professional

When it is on, Talk to a professional shows signed-in people a list of independent professionals. Each listing has the professional's name, credentials, firm, type, where they work, a short bio, a public record link and their booking link, and may include a photo of the professional that they provided. Photos are stored without location or other photo data. Listings are kept until they are removed. Looking at the list shares nothing about you, and a booking link opens the professional's own site with nothing about you added.

Ask chats

The questions you ask in Ask about my spending and the answers are kept for 30 days, then deleted automatically.

If you report an answer from Ask or Calibrate, the question, the answer and your note are kept so the owner can review them, until we review them and then for 90 days, then deleted automatically.

The waitlist

If you join the waitlist, we keep your email address, whether you are an individual or a financial professional, and your firm name if you are a professional.

Records the app keeps to run

We keep a count of AI requests per day and per account, so the app stays within its limits, the saved results of Calibrate my spending, and the day you last opened the app (recorded at most once a day), which is used to pause unused bank connections.

Cookies and browser storage

We use cookies to keep you signed in, to remember your time zone and display choices, and to run sample data mode. Sample data mode also saves its changes in your browser. We do not use advertising or analytics cookies.

We use your data only to run Calibrated Money for you: to show your spending, build and track your budget, find bills and subscriptions, answer your questions in the app, and keep your account secure. We do not use it for advertising.

Bank connections go through Plaid. You sign in to your bank in Plaid's window, so your bank sign-in goes to Plaid, never to us. Plaid then gives us read-only access to the accounts you selected. Plaid's handling of your data is described in the Plaid End User Privacy Policy.

Calibrated Money never moves money. It cannot transfer, pay or withdraw from any account.

If you do not open the app for 3 months, we pause your bank connections: we end them at Plaid, so Plaid stops sending data, and keep the transactions already saved. We tell you in the app and by email 14 days before. Opening the app before then keeps them on, and you can reconnect a paused bank at any time.

These features use AI models from Anthropic. Each sends only what is listed here.

Sorting purchases

When the app cannot place a purchase by your rules, the bank's category or its own rules, it asks the AI which category fits. For each merchant it sends the statement text with all digits removed, one example amount and that amount's date. It never sends names, account numbers or balances. Money moved to or from people, such as Zelle, Venmo, checks or transfers, is never sent; those purchases are flagged for you to check instead. Answers are saved by merchant text and reused for anyone with the same merchant, without any link to you.

Calibrate my spending

When you run it, the app first works out facts about your spending in code. It sends those facts, your spending per category per month in whole dollars, a short list of merchant names with digits removed and the category the app guessed for each, and your Calibrate notes with long runs of digits removed. Money moved to or from people is left out. Your transaction notes are never sent.

Ask about my spending

It sends your question. To answer, the AI can look up totals from your data: spending per category per month, merchant names with digits removed (never payments to or from a person), your subscriptions, your budget amounts, your planned expenses and your bills. The question and answer are saved for 30 days.

Income check

Like Ask, the income check on Income sends income details (no names or account numbers) to the AI provider to help sort your income.

Analyze my subscriptions

Like Ask, Analyze my subscriptions on Recurring payments sends your subscriptions list to the AI provider: each company name with digits removed, its amount, how often it is charged, its first and last charge dates, your Keep or Thinking of canceling choice, and whether its price changed or it started as a trial. It also sends charges that look like a trial in the same way, and your average monthly spending. It never sends names of people, account numbers, notes or other transactions. The latest result is saved on your account until you run it again or delete your account, and it is in Download my data.

The AI runs under Anthropic's commercial terms, which do not allow Anthropic to train its models on what we send.

You can share with a financial advisor (a registered investment adviser or an investment adviser representative) or a CPA by entering an invite code they give you in Settings. You see who the code belongs to before you agree. You can also enter a professional's invite code when you sign up. We then keep the email address you enter as an invite linked to that code, so it can make an account. Signing up shares nothing: after you sign in you see who the code belongs to, and nothing is shared unless you tap Share. A professional you share with sees your email address and your monthly totals by category (spending and income) for the last 12 months, worked out from accounts you have not hidden. They never see individual transactions, account numbers, notes or your bank sign-in.

You can share with more than one professional, and you can stop sharing with any of them at any time in Settings. They lose access right away. When you stop sharing with everyone, the shared totals are deleted. A professional can also remove you as a client. Calibrated Money does not recommend any professional; what you do together is between you and them. Until you choose to share, no one outside Calibrated Money sees your data.

When your advisor is part of a firm

If the advisor or CPA you share with is part of a firm on Calibrated Money, we tell you before you share. The firm's compliance team (its firm admins) can then also see what you share and your email address, and can download them for their records. If the firm pays for its advisors and your advisor leaves the firm, your sharing may move to another advisor at the same firm. We tell you in Settings and To do, and you can stop sharing at any time. If your advisor pays for themselves, your sharing stays with them when they leave and the firm stops seeing it. Clients who shared with an advisor before the advisor joined a firm are never shown to that firm.

Your pro

Your pro is the advisor or CPA whose invite code you used to sign up or to share. If you did not use a code, it is the one you share with (the first, if more than one). We record who it is, when it started, how (a code when you signed up, a code when you shared, or sharing), and when and how it ended. We keep this history even after you stop sharing, so we can review your plan if you leave the professional who brought you. Only you and Calibrated Money can see it. The professional cannot see it, and they see nothing about you unless you share with them.

Your pro shows as a small PRO bubble at the top of your app. Opening it shows their name, type and firm, their photo or logo, any note and contact methods they added, and whether you share with them. Showing it or opening it sends nothing about you to them. To end it, go to Settings, Sharing, and choose Remove as your pro. That hides the bubble and does not stop sharing; Stop sharing is its own choice. The bubble also goes away if their professional account ends.

Inviting your advisor or CPA

If your advisor or CPA does not use Calibrated Money yet, you can make an invite link in Settings and send it yourself (Calibrated Money does not send it). The link holds only a random code. It contains no personal details: not your name, your email or anything about your money. We keep a scrambled copy of the code, when you made the invite, its status and, if you add one, a name for your own list, which is never shown to anyone else. You can cancel an invite at any time. If the professional joins from your link, only you are asked whether to share with them, and nothing is shared unless you tap Share. They are told only that a client invited them, not who.

For advisors and CPAs

A professional who asks for a professional account on our For advisors and CPAs page gives us their name, work email, firm, type of professional and, if they choose, their CRD number, and confirms they are the person named. We use these only to check the request (for example against the public record for that CRD number) and to set up their account, and we reply by email. Only the owner of Calibrated Money can read requests. To limit spam, we keep a scrambled form of the address the request came from for one day. A declined request is kept for 180 days and then deleted. An approved request is kept while the professional account exists.

We do not sell your personal information. We do not share it for advertising.

Companies that run parts of the app for us handle data only to provide that service: Supabase (database and sign-in), Vercel (hosting), Plaid (bank connections), Anthropic (AI), Google (sign-in) and Resend (account emails, such as the warning before a bank connection is paused). We may also share information if the law requires it.

Downloading your data: you can download a copy of your data in Settings, under Your data. It is one zip file of spreadsheets (CSV) with your transactions, accounts, budgets, planned expenses, cash entries, gross pay, rules, notes, Calibrate and Ask history, profile and settings. It never includes bank access tokens, bank connection ids or anyone else's data. Your plan sets how many downloads you can make in any 24 hours. You can download a copy before you delete your account.

Removing a bank in Settings ends that connection at Plaid, so Plaid stops sending its data, and deletes that bank's accounts and transactions and the stored access to it.

Deleting your account in Settings first ends every bank connection at Plaid. If Plaid cannot be reached, nothing is deleted and you can try again. It then removes your waitlist entry and your invite, if you had one, and deletes your account with everything in it: your profile, banks, accounts, transactions, budgets, planned expenses, cash entries, gross pay, notes, Ask chats, Calibrate results and setup answers.

A few records are not part of your account and stay: entries in the owner's change log that note a change to your plan, and AI category answers saved by merchant text, which are not linked to you. Our service providers may keep backups for a limited time.

• Data is encrypted in transit and at rest.
• You can turn on two-factor authentication with an authenticator app.
• Every table in our database uses row-level security, so an account can read only its own rows.
• The access Plaid gives us for each bank is stored encrypted in Supabase Vault. It is used only by our server functions and is never sent to your browser.
• Account numbers are kept only as the last 4 digits, and access is read-only.

No system is perfectly secure, but these protections are in place for every account.

Calibrated Money is for people 18 or older in the United States, with accounts at US banks. It is not meant for children, and we do not knowingly collect information from anyone under 18.

If we change this policy, we will update the date at the top. If a change affects how your data is used in a significant way, we will tell you in the app before it takes effect.

Questions about this policy or your data? Contact us at calibratedmoney@gmail.com. See also the Terms of Use.